After an AP is powered on and obtains an AC IP address, the AP begins to establish CAPWAP tunnels with the AC. CAPWAP tunnels include control and data tunnels.
CAPWAP tunnels use Datagram Transport Layer Security (DTLS) encryption and sensitive information encryption and integrity check and heartbeat detection to ensure security.